Principal, AI Security

The ideal candidate combines deep cybersecurity expertise with practical experience securing modern AI ecosystems, including autonomous and semi-autonomous agents, large language models, AI platforms, model gateways, non-human identities, and data access controls. This individual will partner closely with Information Security, Product Security, Legal, Privacy, Engineering, Cloud Operations, Enterprise Architecture, Infrastructure, and business leaders to help drive innovative AI capabilities while protecting customers, products, data, and intellectual property.

Duties & Responsibilities

• Define and lead Itron's enterprise AI security strategy, architecture, policies, standards, reference architectures, and multi-year roadmap.
• Design and implement security controls across the AI and agent lifecycle, including registration, inventory management, identity governance, credential protection, authorization boundaries, autonomy controls, human oversight checkpoints, memory isolation, and agent decommissioning.
• Establish scalable security guardrails for generative AI platforms, model integrations, APIs, plugins, automation workflows, AI assistants, and emerging agentic ecosystems.
• Develop and maintain governance controls supporting privacy, confidentiality, data protection, transparency, explainability, accountability, ethical AI use, and bias mitigation.
• Lead AI-focused threat modeling, adversarial testing, security reviews, and risk assessments for enterprise and customer-facing solutions.
• Evaluate and mitigate emerging AI threats, including prompt injection, tool misuse, privilege escalation, AI supply chain compromise, context poisoning, insecure agent interactions, and rogue agent behavior.
• Partner with engineering, product, and architecture teams to embed secure-by-design principles into the development, deployment, testing, and operation of AI-enabled systems.
• Advance the use of AI within Cybersecurity by designing and piloting AI-assisted capabilities that improve detection engineering, threat hunting, vulnerability management, alert triage, evidence collection, and operational effectiveness.
• Define security logging, telemetry, monitoring, alerting, and reporting requirements that measure AI control effectiveness and detect anomalous or malicious activity.
• Develop and operate AI Security Posture Management capabilities, including inventories, risk assessments, third-party evaluations, incident response processes, compliance readiness, and ongoing monitoring.
• Conduct security assessments of AI vendors, platforms, and service providers with emphasis on architecture, data handling, privacy, access controls, resiliency, and operational risk.
• Provide technical leadership and guidance for AI-related incidents, investigations, governance decisions, policy exceptions, and risk acceptance reviews.
• Author clear technical standards, reference architectures, implementation guidance, and executive communications that enable responsible and secure AI adoption.
• Mentor engineers, architects, and security practitioners while fostering a collaborative, customer-centric culture that balances innovation with risk management.
• Stay current on evolving AI technologies, industry regulations, attack techniques, and emerging security best practices, translating insights into actionable improvements for Itron.

Required Skills & Experience

• 7+ years of experience in cybersecurity, security architecture, cloud security, identity and access management, application security, product security, or a related technical discipline.
• 2+ years of experience working with AI-enabled systems, machine learning environments, automation platforms, advanced analytics solutions, or generative AI technologies.
• Demonstrated hands-on experience securing or building agentic systems, AI orchestration platforms, non-human identity solutions, model integrations, retrieval pipelines, and automated workflows.
• Experience implementing security controls for cloud platforms, APIs, identity services, secrets management, data protection, logging, monitoring, and third-party integrations.
• Proven experience conducting threat modeling, architecture reviews, security assessments, control validations, and cyber risk evaluations.
• Strong understanding of authentication, authorization, least privilege, secure software design principles, and modern security architectures.
• Ability to analyze complex AI and cybersecurity risks and communicate practical recommendations to both technical and business leaders.
• Exceptional written, verbal, facilitation, and stakeholder-management skills.
• Demonstrated ability to operate effectively across diverse teams while driving accountability, collaboration, and execution in a fast-changing technology environment.
• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related field, or equivalent combination of education and experience.

Preferred Skills & Experience

• Experience securing large-scale deployments of frontier AI models through direct provider APIs, Microsoft Foundry, Amazon Bedrock, model gateways, or comparable enterprise AI platforms.
• Hands-on experience with Microsoft Foundry Agent Service, Model Context Protocol (MCP) implementations, AI gateway technologies, GitHub Copilot, Microsoft 365 Copilot, Vertex AI, Databricks AI capabilities, ChatGPT Enterprise, or similar platforms.
• Familiarity with AI security and governance frameworks such as NIST AI RMF, OWASP Top 10 for LLM Applications, OWASP Top 10 for Agentic Applications, MITRE ATLAS, ISO/IEC 42001, and AI regulatory readiness initiatives.
• Experience performing AI red teaming, adversarial testing, prompt injection testing, abuse-case development, or AI deployment readiness assessments.
• Background in secure software development, DevSecOps, CI/CD security, container security, software supply chain security, or product security architecture reviews.
• Experience operating in regulated industries or environments aligned to ISO 27001, SOC 2, NIST, GDPR, CMMC, critical infrastructure, utilities, or similar compliance frameworks.
• Professional certifications such as CISSP, CCSP, CSSLP, Microsoft Security certifications, cloud security certifications, AI governance certifications, AI security certifications, or equivalent credentials.

Travel: Less than 25% on average

Benefits Info:
This position also includes a competitive benefit package including; financial, social, health and wellbeing programs, paid vacation, 401k matching, employee stock purchase program, hybrid work schedule, and more!

The successful candidate’s starting salary will be determined based on permissible, non-discriminatory factors such as skills and experience and may vary by location. The base salary is $96,000-165,000 annually. This position is eligible for our annual bonus program.

#LI-EP1

Itron is committed to building an inclusive and diverse workforce and providing an authentic workplace experience for all employees. If you are excited about this role but your past experiences don't perfectly align with every requirement, we encourage you to apply anyway. In the end, you may be just who we are looking for!

The successful candidate's starting wage will be determined based on permissible, non-discriminatory factors such as skills and experience.

Itron is proud to be an Equal Opportunity Employer. If you require an accommodation to apply, please contact a recruiting representative at 1-800-635-5461 or email Accessibility@itron.com.

Itron is transforming how the world manages energy, water and city services. Our trusted intelligent infrastructure solutions help utilities and cities improve efficiency, build resilience and deliver safe, reliable and affordable service. With edge intelligence, we connect people, data insights and devices so communities can better manage the essential resources they rely on to live. Join us as we create a more resourceful world: www.itron.com